Static task
static1
Behavioral task
behavioral1
Sample
64a42496b825b3131eaa25ad19dab2d0cfa7a5e1ec09490ded67774e5caab488N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
64a42496b825b3131eaa25ad19dab2d0cfa7a5e1ec09490ded67774e5caab488N.dll
Resource
win10v2004-20241007-en
General
-
Target
64a42496b825b3131eaa25ad19dab2d0cfa7a5e1ec09490ded67774e5caab488N
-
Size
49KB
-
MD5
2cba090768c43802d98a3ea9c3272410
-
SHA1
efae43b3821eabf479a37527f126dd496b785b27
-
SHA256
64a42496b825b3131eaa25ad19dab2d0cfa7a5e1ec09490ded67774e5caab488
-
SHA512
a3cdf3cc3d54a8f3f369c498c53910acfbb5005c2b7165aff73805fe61e039a6cf383a41426bb0d6a193ff447a0509fc3082fa25ca9705adc853acf9c08e59c8
-
SSDEEP
768:iKswcjIB3rYj2SGU9Xn3rzMS0qPcXLUP0CuQ0SIuF2hWQ8n2u1/fdyFkbE:i52MjjGSXn3XM4PcTQNSWlpfQFj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64a42496b825b3131eaa25ad19dab2d0cfa7a5e1ec09490ded67774e5caab488N
Files
-
64a42496b825b3131eaa25ad19dab2d0cfa7a5e1ec09490ded67774e5caab488N.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 260KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ueyfwreo Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crrrybcd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crrrybcd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE